Bluetooth problem could let hackers take control of Apple, Samsung and Google devices

Bluetooth Samsung
Potentially millions of smartphones that connect via Bluetooth are vulnerable Credit: Bloomberg

Millions of mobile phones, laptops and smart home devices could be at risk of hacking after researchers discovered a way to take over devices using the Bluetooth connection.

Vulnerabilities in Bluetooth, which allow devices to link wirelessly over short distances, could be exploited to let hackers take over devices, and steal data and passwords.The problem affects products from major brands including Apple, Samsung, Google and Microsoft.  

The problem affects nearly all devices with a Bluetooth connection, and is not limited to one type of phone or operating system, according to security research firm Armis. 

The researchers managed to infiltrate a Google Pixel smartphone, Samsung Galaxy phones and tablets, an LG Sports Watch and a car audio system using the hack.

Google Pixel
Researchers demonstrated the attack on the Google Pixel Credit: Google

The Armis researchers said the problem had also been found across potentially billions of Android, Microsoft, Samsung and Linux devices. Any iPhones and iPads that haven't been updated to iOS 10 or later are also vulnerable.

The attack allowed researchers to take over devices remotely at short range, stealing data and even hacking the camera.

"The BlueBorne attack concerns us because of the medium by which it operates. Unlike the majority of attacks today, which rely on the internet, a BlueBorne attack spreads through the air," Armis said.

Armis said Bluetooth attacks could be far more aggressive than previous hacks and remain undetected by most current security measures. "Unlike traditional malware or attacks, the user does not have to click on a link or download a questionable file," it said. "No action by the user is necessary to enable the attack."

Microsoft, Google and Linux have all introduced patches that fix the problem, according to Armis. Apple devices that are up to date are already be protected. Samsung, which is the world's biggest smartphone producer, did not respond to Armis regarding a security update. 

License this content